Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3138372e36312e3131322e302f32312d3332203d3e20323633303437.roa
File:                     3138372e36312e3131322e302f32312d3332203d3e20323633303437.roa (raw, json)
Hash identifier:          VlC4X0ybM7sHWCD7Vke0M7gQdTR8wgcm/+71sOZGhJ0=
Subject key identifier:   0F:7B:14:51:1B:43:67:1D:FE:A0:C1:6A:65:36:D1:EE:7F:A2:E1:87
Certificate issuer:       /CN=2D5218850067B1879FF7D928A844733CA008C908
Certificate serial:       0F2D3BB8CEB8EE6038D5B84E95AB9DA696C766F4
Authority key identifier: 2D:52:18:85:00:67:B1:87:9F:F7:D9:28:A8:44:73:3C:A0:08:C9:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5218850067B1879FF7D928A844733CA008C908.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3138372e36312e3131322e302f32312d3332203d3e20323633303437.roa
Signing time:             Wed 29 Jan 2025 13:26:36 +0000
ROA not before:           Wed 29 Jan 2025 13:21:36 +0000
ROA not after:            Wed 28 Jan 2026 13:26:36 +0000
asID:                     263047
IP address blocks:        187.61.112.0/21 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:2d:3b:b8:ce:b8:ee:60:38:d5:b8:4e:95:ab:9d:a6:96:c7:66:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D5218850067B1879FF7D928A844733CA008C908
        Validity
            Not Before: Jan 29 13:21:36 2025 GMT
            Not After : Jan 28 13:26:36 2026 GMT
        Subject: CN=0F7B14511B43671DFEA0C16A6536D1EE7FA2E187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6d:ce:79:af:47:03:b4:64:64:36:3e:55:6c:
                    35:ae:d2:f9:c2:67:45:1b:bf:bd:6a:3f:a9:86:74:
                    af:27:9a:ef:a2:bf:e2:ee:d3:b4:5a:0b:f7:d4:0e:
                    87:99:cc:2b:fa:be:ab:1c:3d:cd:ce:62:a9:26:d8:
                    d2:92:13:56:e4:7d:5d:ec:38:1c:ed:57:a3:7e:1b:
                    5b:ed:45:4d:10:b5:93:5d:4b:e8:2b:b0:1f:99:78:
                    91:67:91:59:83:c9:0a:08:82:0a:42:79:50:a4:a6:
                    b2:0b:84:3a:a0:22:d7:cd:98:8c:4c:f6:72:22:16:
                    3a:30:34:fb:38:3f:c1:70:c3:b6:3b:02:9d:11:f8:
                    7e:10:59:b6:08:86:de:df:7a:41:59:54:9c:7f:a6:
                    2c:43:bb:12:a6:b0:25:2c:ee:de:c5:2b:ef:d7:c1:
                    22:86:85:09:ce:35:c0:dd:ef:25:e5:84:45:3e:b1:
                    16:5a:96:6a:0b:8c:7a:3e:08:03:35:1f:c0:2b:af:
                    d6:e0:a1:31:ad:48:67:df:12:d9:02:d5:f9:0e:31:
                    fb:08:84:80:f6:f2:c2:0a:2c:66:9c:a0:5e:c5:b7:
                    49:db:61:c2:74:69:e7:0a:06:ea:ce:54:52:43:61:
                    ad:77:52:3c:f3:18:7d:0b:5e:82:04:f8:65:8b:1e:
                    37:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:7B:14:51:1B:43:67:1D:FE:A0:C1:6A:65:36:D1:EE:7F:A2:E1:87
            X509v3 Authority Key Identifier:
                keyid:2D:52:18:85:00:67:B1:87:9F:F7:D9:28:A8:44:73:3C:A0:08:C9:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/2D5218850067B1879FF7D928A844733CA008C908.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5218850067B1879FF7D928A844733CA008C908.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3138372e36312e3131322e302f32312d3332203d3e20323633303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0f:99:6c:38:65:d2:3a:a4:e6:d5:bb:3a:c3:70:a2:c4:28:85:
         bd:e0:b8:65:4a:85:99:0c:80:80:ad:88:eb:9c:94:f1:0a:f2:
         cb:d1:ad:25:6f:97:c6:31:f9:ae:f2:19:c6:cf:58:d8:c2:65:
         17:c1:5d:e9:ed:8d:66:dd:cc:66:2f:1b:df:f8:ea:93:12:65:
         cc:8c:21:65:61:3a:9c:2f:0c:06:34:f6:44:21:7c:e6:c5:95:
         d8:fd:48:b0:11:0c:ee:68:e6:6f:0d:57:9f:7c:f9:96:6b:7e:
         63:47:a1:32:92:5e:e6:59:de:e0:c5:a3:34:39:ae:96:98:df:
         39:14:27:0c:d3:2b:de:49:61:a2:dc:1b:9a:27:e1:49:9b:04:
         c8:51:ba:d2:d1:b0:c5:05:82:c5:02:50:5c:a6:72:df:dc:36:
         8d:a1:6f:e4:52:bf:aa:44:a2:70:9c:ab:08:6a:25:f7:cf:84:
         b0:14:8e:ae:5e:04:ec:6a:d0:d8:42:ff:59:10:b7:22:1e:b6:
         e8:b7:13:0c:a4:83:5c:ff:67:a2:aa:7e:8b:49:90:0e:45:bf:
         ef:0b:76:65:af:62:42:cb:ae:a9:43:d8:85:02:75:9d:62:55:
         1c:75:df:30:77:64:be:72:e3:23:e6:fc:bf:46:23:e1:0a:c9:
         52:ef:27:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 12:18:14 2025 by rpki-client